It is presented a method performed in a proxy. The method comprises the steps of: establishing a first secure connection between the proxy and a content server; forwarding messages between a client and the content server to establish a second secure connection between the client and the content server; receiving security parameters from the content server over the first secure connection, the security parameters being associated with the second secure connection; obtaining the content; and transmitting the content to the client using an encryption key derived from the security parameters.